Privacy Policy

yapp ("we," "us," or "our") is a voice journaling app that helps you capture your thoughts and surface insights from what you say. This policy explains what data we collect, how we use it, and your rights.

What We Collect

When you use yapp, we collect:

• Voice recordings — audio you record inside the app.
• Transcriptions — text generated from your recordings.
• Insights and reflections — summaries, themes, and questions derived from your transcriptions using AI.
• Account information — your name and email address when you sign in with Apple or email.
• Usage data — how you interact with the app (e.g., features used, session frequency) to help us improve the product.

How We Use Your Data

We use your data to:

• Transcribe and process your recordings to generate insights.
• Surface patterns, themes, and reflective questions over time.
• Sync your journal across your devices.
• Improve the app's performance and features.

We do not sell your data. We do not use your recordings or transcriptions to train third-party AI models without your explicit consent.

Third-Party Services

To deliver yapp's features, your data is transmitted to the following third-party services. We share only the minimum data necessary for each service to function.

• Replicate (WhisperX) — your voice recordings are sent to Replicate to be transcribed into text. Audio data is processed transiently and is not retained by Replicate beyond the request. Learn more: replicate.com/privacy
• Google Gemini (Google LLC) — your transcribed text is sent to Google Gemini to generate insights, reflective questions, and summaries. Your data is not used to train Google's AI models. Learn more: policies.google.com/privacy
• Cloudflare R2 — audio files are stored in Cloudflare's object storage, encrypted at rest and in transit.
• Railway — cloud infrastructure hosting our backend servers. Your data remains on Railway's infrastructure except when passed to the services above.
• Firebase (Google LLC) — used for authentication and push notifications. We share your device token and account email for these purposes only.

All third-party processors are contractually bound to protect your data and may not use it for their own purposes beyond providing the service described. We do not sell your data to any third party.

We do not use your recordings or transcriptions to train AI models. Your data is processed to generate your personal insights only.

Data Storage & Security

Your recordings and transcriptions are stored securely on our servers hosted via Railway. We use encryption in transit (HTTPS) for all data transfers. We retain your data for as long as your account is active.

Your Rights

You can:

• Access or export your recordings and transcriptions at any time from within the app.
• Delete individual recordings or your entire account.
• Request a copy of all data we hold about you.

To exercise any of these rights, email us at hello@justyapp.com.

Children's Privacy

yapp is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. We'll notify you of material changes via the app or email. Continued use of yapp after changes take effect constitutes acceptance of the updated policy.

Contact

Questions? Email us at hello@justyapp.com